In shortInstitutes own their data. We hold it for them.
Drishtaa is software sold to coaching institutes and schools. When an institute stores a student's marks or a parent's phone number in Drishtaa, that information belongs to the institute — we are the processor, they are the controller. We do not sell it, we do not advertise against it, and we do not use one institute's data to serve another. Every institute's records are kept fully separated from every other institute's, and the platform is built so that a request for one institute's data cannot return another's.
What we collectOnly what the institute puts in, plus what keeps the service running.
Information institutes enter
Student names, class and batch, admission and attendance records, marks and exam results, fee plans and payment history, parent and guardian names, mobile numbers and email addresses, teacher and staff details, and any notes staff choose to record — for example after a parent meeting or counselling session.
Information we generate
Account sign-in details, a log of messages sent through the platform and their delivery status, records of support requests, and ordinary technical logs — the time of a request, the page involved and any error raised — which we use to keep the service working and to investigate faults.
We do not ask for and do not want payment card numbers, government identity numbers, health information or any other sensitive category of personal data. Please do not enter them into free-text fields.
MessagingHow WhatsApp and email are used.
Drishtaa sends messages on an institute's behalf — fee reminders and receipts, attendance alerts, exam schedules, meeting invitations and notices. These are sent over the WhatsApp Business Platform, which is operated by Meta, from the institute's own WhatsApp Business number, and by email. To do that, a parent or guardian's mobile number and the content of the message are passed to Meta, whose own terms and privacy policy then apply to that transmission.
Two rules are built into the platform rather than left to policy. First, an institute can only message a number that already exists in its own records as a student, guardian, enquiry or staff member — it cannot upload a list of strangers and message them. Second, anyone can reply STOP to opt out of promotional messages at any time, and the platform will refuse to send them further promotional messages. Service messages that a family needs — a fee receipt, an absence alert — are not blocked by that opt-out, because withholding them would harm the very people the policy is meant to protect.
Who else is involvedThe services we rely on.
Running Drishtaa means trusting a small number of established providers. Each receives only what it needs to do its job:
Hosting and data storage
Enterprise-grade cloud infrastructure providers, certified to recognised security standards, host the application and store institute records. Data is held in India.
Messaging
Meta operates the WhatsApp Business Platform used to deliver messages. Email is sent through our mail provider.
Support assistance
When a user raises a support request, its text — and any screenshot or voice note attached — may be processed by an AI service to help answer it quickly. That content is not used to train those models.
A current list of these providers, with the country each processes data in, is available to any institute on request at connect@drishtaa.com. We do not sell personal information to anyone, and we do not share it with advertisers. We may disclose information if the law requires it, and we will tell the institute concerned unless we are legally prevented from doing so.
ChildrenRecords about minors.
Most students in Drishtaa are under eighteen. Their records are entered by the institute they attend, under the relationship the institute has with the family, and are visible only to that institute's authorised staff and to the student's own parents through the parent portal. Drishtaa does not market to students, does not build advertising profiles, and does not make a student's record available to anyone outside their institute. A parent who wants to see, correct or remove what is held about their child should contact the institute first, as the institute controls that record; we will support the institute in acting on the request.
Keeping it safeSecurity and how long we keep things.
Access is controlled by role: an institute owner decides which staff member can see fees, marks, attendance or contact details, and those permissions are enforced at the data layer rather than merely hidden in the interface. Connections are encrypted in transit and data is encrypted at rest. Backups are taken daily. Administrative access on our side is limited to the people who maintain the platform, and is used only to operate and support it. More detail is on our Security page.
We keep an institute's data for as long as its account is active. If an institute leaves, it can ask us to export its records and to delete them; we complete deletion within 30 days of the request, other than anything we must retain for legal or accounting reasons. Message delivery logs are kept for a limited period so that disputes about whether a reminder was sent can be settled.
This websiteCookies and analytics.
This website uses no advertising trackers and no social-media pixels. We use privacy-friendly analytics that count visits without identifying you. The demo form sends only what you type into it, to us, so that we can reply.
Your rightsAsking us what we hold, or to change it.
You can ask for a copy of the personal information we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to a particular use. If you are a parent or student, the fastest route is your institute, because the record is theirs. If you would rather come to us directly, or if the institute has not responded, write to us and we will help.
Under India's Digital Personal Data Protection Act, 2023, you also have the right to raise a grievance with us and, if we do not resolve it, with the Data Protection Board of India. Our grievance contact is connect@drishtaa.com; we acknowledge within 7 days and aim to resolve within 30.
If we ever change this policy in a way that materially affects how information is used, we will tell institutes before the change takes effect and update the date at the top of this page.
Third-party servicesGoogle and YouTube
Drishtaa uses YouTube API Services.
Drishtaa publishes its own marketing and training videos to the Drishtaa YouTube channel through an internal publishing tool. When that tool is connected, it uploads video files we have created to our own channel and reads the channel's name and ID to confirm the connection is working. It does not access any other person's YouTube account, and it does not read viewers, subscribers, comments, watch history or analytics.
No institute, staff, student or parent information is ever sent to YouTube or Google through this tool. The only data that leaves Drishtaa is the video file itself and its title, description and tags, all of which we write.
By using these features you are also covered by the Google Privacy Policy, which explains how Google handles information: http://www.google.com/policies/privacy
You can review or revoke Drishtaa's access to a Google account at any time from the Google security settings page: https://security.google.com/settings/security/permissions
Questions or complaints about this: connect@drishtaa.com
Write to connect@drishtaa.com and a person will answer.